CB
Product
C-Blosc2
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add C-Blosc2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3204 | 9.8 | Apr 2 | c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow Affected: through 2.13.2 |
| CVE-2024-3203 | 9.8 | Apr 2 | c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow Affected: through 2.13.2 |
| CVE-2020-29367 | 7.8 | Nov 27 | blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +3 more |
| CVE-2023-37188 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c Affected: before 2.9.3 |
| CVE-2023-37187 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress Affected: before 2.9.3 |
| CVE-2023-37185 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c Affected: before 2.9.3 |
| CVE-2023-37186 | 7.5 | Dec 25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset Affected: before 2.9.3 |
| CVE-2026-103222 | 5.6 | Sep 30 | Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow Affected: 3.3.0; 3.3.1; 3.3.2 |
Showing 8